CVE-2026-43241

ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access

HIGH
7.1
CVSS Score
Published: May 6, 2026 at 11:28 AM UTC
Updated: June 17, 2026 at 10:49 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.1
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access Number of MW LUTs depends on NTB configuration and can be set to MAX_MWS, This patch protects against invalid index out of bounds access to mw_sizes When invalid access print message to user that configuration is not valid.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.15 ≤ v < 5.10.2524.15 ≤ v < 5.15.2024.15 ≤ v < 6.1.1654.15 ≤ v < 6.12.754.15 ≤ v < 6.18.164.15 ≤ v < 6.19.64.15 ≤ v < 6.6.1284.15 ≤ v < 7.05.11 ≤ v < 5.15.2025.16 ≤ v < 6.1.1656.13 ≤ v < 6.18.166.19 ≤ v < 6.19.66.2 ≤ v < 6.6.1286.7 ≤ v < 6.12.754.15ec0467ccbdeb69a86c8729073057bda7bce00eec
Vendor states this is fixed in 0e930420945106151c6eb3d7837b4e6154e9b144 (fixed)
Vendor states this is fixed in 2346856b74823a2a78109002e479a3d02526a9ce (fixed)
Vendor states this is fixed in 348e1ac9ad983ed7e62de14e1daf47f1695a4ce9 (fixed)
Vendor states this is fixed in 47ce292dd45dc689747c40603222691638919189 (fixed)
Vendor states this is fixed in 740945de896021b9a859e71f38f6aea72a6393cf (fixed)
Vendor states this is fixed in 85c9daa1f8319bbb3dfee71dc6a2f969cd3b4c92 (fixed)
Vendor states this is fixed in c8ba7ad2cc1c7b90570aa347b8ebbe279f1eface (fixed)
Vendor states this is fixed in ee02c4f980c91820845dd8e469ec7dc670ab6d9d (fixed)
Vendor states this is fixed in 4.15 (unaffected)
Vendor states this is fixed in 5.10.252 (unaffected)
Vendor states this is fixed in 5.15.202 (unaffected)
Vendor states this is fixed in 6.1.165 (unaffected)
Vendor states this is fixed in 6.12.75 (unaffected)
Vendor states this is fixed in 6.18.16 (unaffected)
Vendor states this is fixed in 6.19.6 (unaffected)
Vendor states this is fixed in 6.6.128 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-125

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card